# dockerhub Published articles for dockerhub. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Hardened Container Images: Images for a Secure Supply Chain DevFeed: [Hardened Container Images: Images for a Secure Supply Chain]() Original publisher: [Read original article]() Published: 2024-04-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard images](), [Containers](), [container-security](), [Vulnerabilities](), [grype](), [snyk]() Tags: [canonical](), [canonical-chiselled-image](), [chainguard](), [chainguard-images](), [container](), [container-image](), [container-images](), [container-security](), [containers](), [cve](), [debian](), [dockerhub](), [false-positives](), [grype](), [hardened-container-image](), [iron-bank](), [redhat](), [scanners](), [security](), [shift-left](), [snyk](), [software-supply-chain](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard introduces its inaugural State of Hardened Container Images report, examining the security of hardened container images from providers including Red Hat, Iron Bank, and Chainguard. The article argues that hardened container images deserve distinct consideration from container vulnerability scanning and describes the report as addressing secure software supply chains. ### Source excerpt Check out our analysis of the hardened container image landscape, including offerings from Red Hat, Iron Bank, and others. ## Chainguard Images now available on Docker Hub DevFeed: [Chainguard Images now available on Docker Hub]() Original publisher: [Read original article]() Published: 2024-03-14T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Docker Hub](), [Docker Verified Publisher](), [container images](), [Security](), [supply-chain-security](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [container-images](), [developer](), [docker](), [docker-hub](), [docker-hub-verified-publisher](), [docker-verified-publisher](), [dockerhub](), [hardened-images](), [open-source](), [security](), [software-supply-chain](), [verified-publisher]() ### AI overview Chainguard Images are now available on Docker Hub after Chainguard joined the Docker Verified Publisher program. The partnership gives developers access to minimal, secure, hardened images for open source and cloud-native projects, with guidance for finding and pulling verified images. ### Source excerpt Chainguard Images joins Docker Hub as a Verified Publisher, offering developers secure, hardened images for open source projects. ## Building minimal and low CVE images for compiled languages DevFeed: [Building minimal and low CVE images for compiled languages]() Original publisher: [Read original article]() Published: 2024-02-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Containers](), [Docker](), [Dockerfile](), [Go Language](), [Vulnerabilities](), [Docker Hub](), [Debian](), [Ubuntu]() Tags: [chainguard](), [chainguard-images](), [compiled-language](), [containers](), [deployment](), [distroless](), [docker](), [docker-hub](), [dockerfiles](), [dockerhub](), [go](), [vulnerabilities]() ### AI overview This article demonstrates how to build smaller, lower-CVE container images for compiled languages by separating build and runtime concerns and replacing full Debian or Ubuntu bases with Chainguard Images. A Go web server example reduces the image from 892 MB to 775 MB and eliminates the reported CVEs after a one-line base-image change. ### Source excerpt Leverage Chainguard's insights to forge low-CVE, compact images for compiled languages, boosting your security posture. ## Apache Airflow 1.10.10 DevFeed: [Apache Airflow 1.10.10]() Original publisher: [Read original article]() Author: Apache Airflow Published: 2020-04-09T00:00:00Z Content type: release Language: en Sources: [Apache Airflow Blog]() Topics: [airflow](), [Docker](), [Python](), [changelog](), [HashiCorp Vault](), [ui]() Tags: [3](), [airflow](), [apache-airflow](), [bug-fixes](), [changelog](), [docker](), [docker-image](), [dockerhub](), [environment-variables](), [hashicorp-vault](), [new-features](), [python](), [release](), [timezone](), [ui]() ### AI overview Apache Airflow 1.10.10 includes 199 commits since version 1.10.9, with 11 new features, 43 improvements, 44 bug fixes, and documentation changes. Notable additions include selectable RBAC UI timezones, production Docker images, secrets backends, DAG serialization for stateless webservers, and other UI and task-execution changes. ### Source excerpt Airflow 1.10.10 contains 199 commits since 1.10.9 and includes 11 new features, 43 improvements, 44 bug fixes, and several doc changes. Details: PyPI: https://pypi.org/project/apache-airflow/1.10.10/ Docs: https://airflow.apache.org/docs/1.10.10/ Changelog: http://airflow.apache.org/docs/1.10.10/changelog.html Some of the noteworthy new features (user-facing) are: Allow user to choose timezone to use in the RBAC UI Add Production Docker image support Allow Retrieving Airflow Connections & Variables from various Secrets backend Stateless Webserver using DAG Serialization Tasks with Dummy Operators are no longer sent to executor Allow passing DagRun conf when triggering dags via UI Allow user to choose timezone to use in the RBAC UI By default the Web UI will show times in UTC. It is possible to change the timezone shown by using the menu in the top right (click on the clock to activate it): Screenshot: Details: https://airflow.apache.org/docs/1.10.10/timezone.html#web-ui Note: This feature is only available for the RBAC UI (enabled using rbac=True in [webserver] section in your airflow.cfg). Add Production Docker image support There are brand-new production images (alpha quality) available for Airflow 1.10.10. You can pull them from the Apache Airflow Dockerhub repository and start using it. More information about using production images can be found in https://github.com/apache/airflow/blob/master/IMAGES.rst#using-the-images. Soon it will be updated with information how to use images using official helm chart. To pull the images you can run one of the following commands: docker pull apache/airflow:1.10.10-python2.7 docker pull apache/airflow:1.10.10-python3.5 docker pull apache/airflow:1.10.10-python3.6 docker pull apache/airflow:1.10.10-python3.7 docker pull apache/airflow:1.10.10 (uses Python 3.6) Allow Retrieving Airflow Connections & Variables from various Secrets backend From Airflow 1.10.10, users would be able to get Airflow Variables from Environment Variabl